Page 4 - Hold Security News Today

One of the world’s most successful ransomware groups is reeling from a massive dump of its own internal data after the cybercriminal gang aligned itself with the Russian government.

Chat logs and internal recriminations dating back 13 months were released to the public after ransomware-as-a-service group Conti declared it stood behind Putin in Ukraine.

The data includes internal chat logs between members and affiliates of the group, unveiling their personal details, conflicts, and accusations

After the Conti ransomware group sided with Russian President Vladimir Putin, its internal chat logs were leaked online, leading other cybercriminal gangs to declare neutrality in the conflict.

Internal messages WIRED has viewed shed new light on the operators of one of the world's biggest botnets.

Preventing top executives from becoming BEC victims requires a different approach. Putting the risk in business terms is key.

share Print A Russian-based hacker group blamed for a massive ransomware attack earlier this month has gone offline, sparking speculation about whether the move was the result of a government-led action. The webpages of the group known as REvil disappeared from the dark web on July 13, cybersecurity researchers said. Both its data-leak site and ransom-negotiating portals were unreachable. The researchers said that it was unclear whether the outage was the result of actions taken by law enforcem...

A screenshot of a negotiating portal set up by the REvil ransomware group (Source: SecurityScorecard) Threat intelligence researchers are looking closely at REvil, the ransomware gang that infected up to 1,500 companies in a single swoop. A look at part of the groups online infrastructure shows clear lines to Russian and U.K. service providers that, in theory, could help law enforcement agencies but dont appear eager to help. On July 2, affiliates of REvil exploited several vulnerabilities in r...

6-year-old Kaseya vulnerability surfaces amid VSA supply chain attack Allowed users to read server files containing usernames, passwords and the location of key databases. Credit: 217194570 © Transversospinales | Dreamstime.com A six-year-old flaw lying in Kaseya’s deprecated billing and customer support site has surfaced amid the ongoing attempt to rectify a supply chain attack on the vendors VSA product that has affected over 1000 businesses globally.  Last week, the US-base...

Some 26 million passwords were exposed in a 1.2 terabyte batch of data found by NordLocker, a security company. It's workaday botnet data, but it highlights a hostile malware landscape, particularly for people still inclined to download pirated software.